CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-3238

phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not properly handled before making a preg_replace function call within the "Replace table prefix" feature.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.646

EPSS Ranking 98.4%

CVSS Severity

CVSS v2 Score 6.0

References

Products affected by CVE-2013-3238

Phpmyadmin » Phpmyadmin » Version: 3.5.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.0.0
Phpmyadmin » Phpmyadmin » Version: 3.5.1.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.1.0
Phpmyadmin » Phpmyadmin » Version: 3.5.2.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.0
Phpmyadmin » Phpmyadmin » Version: 3.5.2.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.1
Phpmyadmin » Phpmyadmin » Version: 3.5.2.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.2
Phpmyadmin » Phpmyadmin » Version: 3.5.3.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.3.0
Phpmyadmin » Phpmyadmin » Version: 3.5.4

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.4
Phpmyadmin » Phpmyadmin » Version: 3.5.5

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.5
Phpmyadmin » Phpmyadmin » Version: 3.5.6

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.6
Phpmyadmin » Phpmyadmin » Version: 3.5.7

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.7
Phpmyadmin » Phpmyadmin » Version: 3.5.8

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.8
Phpmyadmin » Phpmyadmin » Version: 4.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-3238

Products

Pricing

Contact Us